CVE-2025-65185

Low · 2.8

CVSS

2.8

EPSS

0.2%

Published

Dec 17, 2025

CISA due date

—

The record

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses.

Affected packages

Ecosystem	Package	Introduced	Fixed